NETSFLT.SYS is Trojan Ntrootkit

The file NETSFLT.SYS is identified as a virus dropper.
The dropper NETSFLT.SYS is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file NETSFLT.SYS loads into the computer memory and tries to connect to the dangerous web site.
Usually the NETSFLT.SYS dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the NETSFLT.SYS process and delete the file NETSFLT.SYS.

Malware Analysis of NETSFLT.SYS
Full path on a computer: %PROGRAMFILES%\BAIDU\NETSFLT.SYS

How to quickly detect NETSFLT.SYS presence?

Files:

• %WINDIR%\INF\OEM3.PNF
• %WINDIR%\INF\OEM4.INF
• %WINDIR%\INF\OEM3.INF
• %APPDATA%\MICROSOFT\PROTECT\S-1-5-21-2052111302-484763869-725345543-1003\PREFERRED
• %PROGRAMFILES%\BAIDU\NETSFLT.SYS